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IN THE CLAIMS: 
Amended claims follow: 

1 . (Currently Amended) A method for analyzing a network utilizing a host 
controller, comprising: 

(a) accumulating network traffic information; 

(b) tracking a predetermined interval setting; 

(c) polling for the receipt of a demand over a network; and 

(d) in response to the demand or the cessation of the predetermined interval setting, 
transmitting the network traffic information to a zone controller; 

wherein enterprise latency mapping is performed, where at least one zone 
controller chooses a port number associated with an application and pushes a 
configuration request to a plurality of the host controllers in an associated zone, and the 
host controllers push the configuration requests to a plurality of agents so that the agents 
begin to monitor a port associated with the port number, such that monitor data is sent 
from the agents to the host controllers and buffered, whereafter the host controllers 
update the at least one zone controller with consolidated monitor data, where differences 
in delay times are calculated to construct a picture of latency throughout an enterprise: 

wherein a map of a network is generated based on the network traffic 
information: 

wherein intrusion detection services are provided based on the network traffic 
information . 

2. (Currently Amended) The method as recited in claim 1, wherein the network 
traffic information is received from a plurality oft he agents distributed over the 
network. 
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3. (Original) The method as recited in claim 1, and further comprising receiving the 
interval setting from the zone controller. 

4. (Original) The method as recited in claim 3, and further comprising controlling 
the agents to accumulate network traffic information based on the interval 
setting. 

5. (Cancelled) 

6. (Cancelled) 

7. (Currently Amended) The method as recited in claim &V, and further comprising 
transmitting the map to the zone controller. 

8. (Original) The method as recited in claim 1 9 and further comprising 
synchronizing a first clock of the host controller and a second clock of the zone 
controller. 

(Currently Amended) A computer program product for analyzing a network 
utilizing a host controller, comprising: 

computer code for accumulating network traffic information; 
computer code for tracking a predetermined interval setting; 
computer code for polling for the receipt of a demand over a network; and 
computer code for transmitting the network traffic information to a zone 
controller, in response to the demand or the cessation of the predetermined 
interval setting; 

wherein enterprise latency mapping is performed, where at least one zone 
controller chooses a port number associated with an application and pushes a 
configuration request to a plurality of the host controllers in an associated zone, and the 
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host controllers push the configuration requests to a plurality of agents so th at the agents 
begin to monitor a port associated with the port number, such that monitor data is sent 
from the agents to the host controllers and buffered, whereafter the host controllers 
update the at least one zone controller with consolidated monitor data, where differences 
in delay times are calculated to construct a picture of latency throughout an enterprise; 

wherein a map of a network is generated based on the network traffic 
information; 

wherein intrusion detection services are provided based on the network traffic 
information . 

10. (Currently Amended) The computer program product as recited in claim 9, 
wherein the network traffic information is received from a plurality oft heagents 
distributed over the network. 

1 1 . (Original) The computerprogram product as recited in claim 9, and further 
comprising computer code for receiving the interval setting from the zone 
controller. 

12. (Original) The computer program product as recited in claim 11, and further 
comprising computer code for controlling the agents to accumulate network 
traffic information based on the interval setting. 

13. (Cancelled) 

14. (Cancelled) 

15. (Currently Amended) The computer program product as recited in claim 449 and 
further comprising computer code for transmitting the map to the zone 
controller. 
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16. (Original) The computer program product as recited in claim 9, and further 
comprising computer code for synchronizing a first clock of the host controller 
and a second clock of the zone controller. 

17. (Currently Amended) A system for analyzing a network utilizing a host 
controller, comprising: 

(a) logic for accumulating network traffic information; 

(b) logic for tracking a predetermined interval setting; 

(c) logic for polling for the receipt of a demand over a network; and 

(d) logic for transmitting the network traffic information to a zone controller, in 
response to the demand or the cessation of the predetermined interval setting; 
wherein enterprise latency mapping is performed, where at least one zone 

controller chooses a port number associated with an application and pushes a 
configuration request to a plurality of the host controllers in an associated zone, and the 
host controllers push the configuration requests to a plurality of agents so that the agents 
begin to monitor a port associated with the port number, such that monitor data is sent 
from the agents to the host controllers and buffered, whereafter the host controllers 
update the at least one zone controller with consolidated monitor data, where differences 
in delay times are calculated to construct a picture of latency throughout an enterprise: 

wherein a map of a network is generated based on the network traffic 
information; 

wherein intrusion detection services are provided based on the network traffic 
information , 

18. (Currently Amended) The system as recited in claim 17, wherein the network 
traffic information is received from a plurality of the agents distributed over the 
network. 
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19. (Original) The system as recited in claim 17, and further comprising logic for 
receiving the interval setting from the zone controller. 

20. (Original) The system as recited in claim 19, and further comprising logic for 
controlling the agents to accumulate network traffic information based on the 
interval setting. 

21. (Cancelled) 

22. (Cancelled) 

23. (Currently Amended) The system as recited in claim 2217, and further 
comprising logic for transmitting the map to the zone controller. 

24. -(Original) The system as recited in claim 17, and further comprising logic fortf* 

synchronizing a first clock of the host controller and a second clock of the zone 
controller. 

25. (Currently Amended) A method for analyzing a network utilizing a host 
controller, comprising: 

(a) accumulating network traffic information; 

(b) transmitting the network traffic information to a zone controller; 

(c) generating a map of the network based on the network traffic information; and 

(d) transmitting the map to the zone controller; 

wherein enterprise latency mapping is performed where at least one zone 
controller chooses a port number associated with an application and pushes a 
configuration request to a plurality of the host controllers in an associated zone, and the 
host controllers push the configuration requests to a plurality of agents so that the agents 
begin to monitor a port associated with the port number, such that monitor data is sent 
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from the agents to the host controllers and buffered, whereafter the host controllers 
update the at least one zone controller with consolidated monitor data, where differences 
in delay times are calculated to construct a picture of latency throug hout an enterprise; 

wherein intrusion detection services are provided based on the network traffic 
information , 

26. (Currently Amended) A method for analyzing a network utilizing a host 
controller, comprising: 

(a) receiving an interval setting from a zone controller; 

(b) accumulating network traffic information from a plurality of agents distributed 
over a network based on the zone controller; 

(c) tracking a predetermined interval setting; 

(d) polling for the receipt of a demand over the network; 

(e) in response to the demand or the cessation of the predetermined interval setting, 
transmitting the network traffic information to the zone controller; .■ ; 

(f) generating a map of the network based on the network traffic information; 

(g) transmitting the map to the zone controller, and 

(h) synchronizing a clock between the host controller and the zone controller; 
wherein enterprise latency manning is performed, where at least one zone 

controller chooses a port number associated with an application and pushes a 
configuration request to a plurality of the host controllers in an associated zone, and the 
host controllers push the configuration requests to the agents so that the agents begin to 
monitor a port associated with the port number, such that monitor data is sent from the 
agents to the host controllers and buffered, whereafter the host controllers update the at 
least one zone controller with consolidated monitor data, where differences in delay 
times are calculated to construct a picture of latency throughout an enterprise: 

wherein intrusion detection services are provided based on the network traffic 
information . 
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27. (Currently Amended) A method for analyzing a network, comprising: 
accumulating network traffic information from at least one computer utilizing an 

information collector; 

transmitting the network traffic information to an information collector manager; 

and 

generating a map of the network based on the network traffic information; 

wherein enterprise latency mapping is performed, where at least one zone 
controller chooses a port number associated with an application and pushes a 
configuration request to a plurality of the information collector managers in an 
associated zone, and the information collector managers push the configuration requests 
to a plurality of the information collectors so that the information collectors begin to 
monitor a port associated with the port number, such that monitor data is sent from the 
information collectors to the information collector managers and buffered, whereafter 
the information collector managers update the at least one zone controller with 
consolidated monitor data, where differences in delay times are calculated to construct a 
picture of latency throughout an enterprise; 

wherein intrusion detection services are provided based on the network traffic 
information . 

28. (Previously Presented) The method as recited in claim 27, wherein the 
information relates to wireless network traffic. 

29. (Previously Presented) The method as recited in claim 27, wherein the map 
includes a correlation among computers associated with the network traffic 
information. 

30. (Previously Presented) The method as recited in claim 27, wherein the map 
includes a mapping of computers associated with the network traffic 
information. 
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3 1 . (Currently Amended) A computer program product for analyzing a network, 
comprising: 

computer code for accumulating network traffic information from at least one 
source utilizing an information collector; 

computer code for transmitting the network traffic information to an information 
collector manager; and 

computer code for generating a map of the network based on the network traffic 
information; 

wherein enterprise latency mapping is performed, where at least one zone 
controller chooses a port number associated with an application and pushes a ^ 
configuration request to a plurality of the information collector managers in an 
associated zone, and the information collector managers push the configuration requests 
to a plurality of the information collectors so that the information collectors be^in to 
monitor a port associated with the port number^ such* that monitor data is sent from the 
information collectors to the information collector managers and buffered, whereafter 
the information collector managers update the at least one zone controller with 
consolidated monitor data, where differences in delay times are calculated to construct a 
picture of latency throughout an enterprise; 

wherein intrusion detection services are provided based on the network traffic 
information . 

32. (Previously Presented) The computer program product as recited in claim 3 1 , 
wherein the information relates to wireless network traffic. 

33. (Previously Presented) The computer program product as recited in claim 3 1 , 
wherein the map includes a correlation among computers associated with the 
network traffic information. 
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34. (Previously Presented) The computer program product as recited in claim 3 1 , 
wherein the map includes a mapping of computers associated with the network 
traffic information. 
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